Overview

overview

10

Static

static

3

11ea4d9a0c...cs.exe

windows7-x64

10

11ea4d9a0c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11ea4d9a0c850ab178dc451be48295f0_NeikiAnalytics.exe

  • Size

    51KB

  • Sample

    240521-31tqtsec8v

  • MD5

    11ea4d9a0c850ab178dc451be48295f0

  • SHA1

    b197bd3d6096180d2c7fa9550caf68b849cdc36c

  • SHA256

    365fa78a418f1c9b9da2d3e82763d86d51f68868c7c508a6750d9cc58a8c918f

  • SHA512

    da6e14988cd1f969095b0361397188fbc45fad548de433f8baebc9b9c5031a05c6d678fda099c82dcf885c0c70f9ed87d87d620a08ccc3839057626d8f7f5d84

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoYi:ymb3NkkiQ3mdBjFop

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      11ea4d9a0c850ab178dc451be48295f0_NeikiAnalytics.exe

    • Size

      51KB

    • MD5

      11ea4d9a0c850ab178dc451be48295f0

    • SHA1

      b197bd3d6096180d2c7fa9550caf68b849cdc36c

    • SHA256

      365fa78a418f1c9b9da2d3e82763d86d51f68868c7c508a6750d9cc58a8c918f

    • SHA512

      da6e14988cd1f969095b0361397188fbc45fad548de433f8baebc9b9c5031a05c6d678fda099c82dcf885c0c70f9ed87d87d620a08ccc3839057626d8f7f5d84

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoYi:ymb3NkkiQ3mdBjFop

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks